Monday, May 14, 2012

Among radio frequency, optical and radio emissions, which poses the most significant privacy threat for a user?


Most significant privacy threat for a user is most likely to be from radio emissions as those used in wireless networks. This is probably the most common threat for a user given that an unauthorized user could possible gain access to a network or computer and eventually compromises its security.
Radio frequency would be the next significant threat, but usually this is done via RFID devices that are preconfigured and required prior knowledge of what is being accessed. However some military applications of this technology are quite complex and difficult to hack.

Finally optical, given that is not transmitted through the air, requires complex equipment to intercept and any loss of signal can be detected immediately by the receiving end.

For the home office case we can consider a wireless network as a place where some weakness can be found if not properly configured or open. 
In a public library we find the same threat for a wireless network as we do at homes, but with increase violation probability given the amount of traffic this kind of environment has. Any security associated with radio frequency devices are also vulnerable and must be carefully managed since they are exposed to the public, so the possible hackers are unknown. Finally optical threats are very unlikely and if equipped with this technology, then it should be physically secured and out of reach from potential intruders.

On a university department wireless network, the likelihood of unauthorized access to certain areas can be even higher, since you have large number of students that are learning and eventually become experts in this field. Same happens with optical devices, students and external hackers might try to gain access, so they must be properly configured to catch any change in signal strength and that way detect any breach as soon as it happens.  

Monday, April 2, 2012

Computer Network: Difference between a switch, a hub, and a IP router.


A hub is a device used to connect computers and or printers in a network without any type of decision making process, they simple act as concentrators, they can be passive or active meaning that they will regenerate the signal in order to increase the distance data can travel.  They forward all frames to all the attached devices in the network segment. This increases the ease for network eavesdropping, since all machines are receiving frames.

Switches are devices that work at the link layer level, handling frames within a network segment. They alleviate congestion and reduce collisions. This is accomplished by learning the MAC addresses of those machines in the network segment and the port in the switch. Over time the switch learns all these addresses and is capable of only forwarding frames to the port associated with the destination MAC address and not the other machines in the same network segment. This reduces collisions, increases the effective speed of the network and the effective bandwidth. By forwarding frames only to those machines that are the receivers and not every device in the segment, the chances of eavesdropping are greatly reduce.     

Routers are devices that operate at the network layer connecting two or more networks. Routers store information on the neighboring networks and a default gateway. The information store on the router and the protocols configured in a router allows it to take the appropriate action with the packets it receives: drop, deliver or forward. Based on network information routers can handle packets similar to the mail system using zip codes. Routers are susceptible to attacks so the first thing is to have strong passwords, turn off those services not used and in wireless network have strong security measures. Packet sniffing is almost unavoidable so if confidentiality is essential then it is necessary to implement some type of encryption.  

Thanks to Gustavo Ramirez (my classmate) and the to the book (Introduction to Computer Security) which helped me in composing this post.